Hi Saptak,
Pls check your server (AGNI) first, _you_ are sitting with NetBIOS over TCP
(Port 139) open to all & sundry! If you don't believe let me know, would
be happy to send some OOB data to that port the next time I catch it
online ;-)
Also why are you even allowing a anon ftp login on the server?
Check your logs -- I logged in with [EMAIL PROTECTED] as my pass.
BTW, I just now got repeatedly port scanned by some moron coming from the
box --> shringer.cal.icici.co.in... the idiots happened to be on a
vulnerable version sendmail... it was a grt temptation to do something
really nasty. They should be glad that I am a decent harmless guy, who is
always kind to dumb animals...
Cheers,
--Indranil "Not an MCSD" Das Gupta ;-)
On Sat, 23 Oct 1999, Saptak Sen wrote:
> Received: from humanist.netshooter.com (IDENT:[EMAIL PROTECTED]
>[209.195.93.33])
> by cal.vsnl.net.in (8.9.0/8.9.0) with ESMTP id MAA00657;
> Sat, 23 Oct 1999 12:54:03 +0530 (IST)
> Received: (from majordomo@localhost)
> by humanist.netshooter.com (8.9.3/8.9.3) id DAA21160
> for ilug-cal-ilug-cal-outgoing; Sat, 23 Oct 1999 03:08:15 -0400
> Received: from giascl01.vsnl.net.in (giascl01.vsnl.net.in [202.54.9.1])
> by humanist.netshooter.com (8.9.3/8.9.3) with ESMTP id DAA21157
> for <[EMAIL PROTECTED]>; Sat, 23 Oct 1999 03:08:11 -0400
> Received: from AGNI (ppp102-251.pppcal.vsnl.net.in [203.197.102.251])
> by giascl01.vsnl.net.in (8.9.0/8.9.0) with SMTP id MAA13095
> for <[EMAIL PROTECTED]>; Sat, 23 Oct 1999 12:38:58 +0500 (GMT+0500)
> Message-ID: <000801bf1d26$72b6f960$0100a8c0@AGNI>
> From: "Saptak Sen" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: [ilug-cal] [OT] Check how vulnerable your computer is on the Internet
> Date: Sat, 23 Oct 1999 12:45:55 +0530
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="----=_NextPart_000_0005_01BF1D54.8BDAE4A0"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 5.00.2919.5600
> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.5600
> Sender: [EMAIL PROTECTED]
> Precedence: bulk
> Reply-To: [EMAIL PROTECTED]
>
> Hey Penguins,
> Check out the link Shields_Up on the page http://grc.com/default.htm
> It shows how vulnerable your computer (specially Windows with Netbios on) is
> on the Internet.
>
> Saptak Sen
> Microsoft Certified Solution Developer
>
--
To unsubscribe, send mail to [EMAIL PROTECTED] with the body
"unsubscribe ilug-cal" and an empty subject line.
FAQ: http://www.ilug-cal.org/help/faq_list.html
